Cisco Prime WLC mismatch due to expired guest voucher

Hi Cisco Community,
a customer of mine likes to administrate his guest vouchers via lobby ambassador accounts on Cisco Prime.
Unfortunately if one of these Guest Vouchers expires Cisco Prime shows up an Audit Mismatch because this Voucher isnt present at the Controller but still present at Cisco Prime.
I have already tried to execute the Background Task -> Guest Accounts Sync manually but this doesnt solve the issue.
I will add some Screenshots for explanation.
1. I deploy the guest voucher to our WLC´s
2. The guest voucher is visible at the controllers security configuration tab.
3. The guest voucher reaches its validity period and disapears from all the controllers.
4.Then only one controller shows up a configuration mismatch.
After executing the Background Task -> Guest Accounts Sync manually this voucher will be shown as "Expired"
But the mismatch still remain between Controller and PI
Why is this happening and why does it happen only at one of the controllers??
How am I able to fix this issue?
Thanks for your support
regards
Benedikt

Since it has been a while, you might be better off opening a TAC case. If PI doesn't get the config refreshed from the WLC, thats when you get the error your showing. So maybe run the background task just on that one WLC and see if it fails or you get an error.
Thanks,
Scott
Help out other by using the rating system and marking answered questions as "Answered"

Similar Messages

Deleted WLC from its folder under the Device work center of Cisco prime 1.2

I kindly need your help as regarding cisco prime infrastructure.
I added the wireless LAN controller to the prime. I later had to troubleshoot the WLC because the reachability status showed UNREACHABLE.
Due to my troubleshooting, I synched the WLC a couples of times and the collection status has been showing SYNCHING since then.
I also tried deleting the WLC from its folder under device work center and it deleted but it still reflects under the ALL folder.
Please would I have to wait for the SYNCHRONIZATION of the WLC to stop before I can completely delete it and re-add??
Also I noticed that after deploying ''Interface Health'' under Monitoring Configurations, the CPU and memory utilization did not reflect for the devices cisco
prime is managing.
What have I missed out?
Kindly help.

Prime Infrastructure won't support those legacy models.

Cisco Prime and WLC audit

Hello,
Is there an automated way to perform audit of Wlc from the Cisco Prime Infrastructure GUI? I use to go to Monitor->Controller, then check the box near one of the managed wlc, finally choosing 'Audit Now' on the top menu. It works fine, but when you have multiple wlcs, such operation takes a long time. I would like to retain the configuration which is on the wlc instead of the one on the PI database too.
Do you know if there is a better way to perform the audit?
Thanks
Théophile

Have you looked at the background task to see if there is an audit there? Are you really wanting to audit or just refresh the config from the WLC? If you do hate getting the mismatch and dine have all the templates for each of the WLC's, the audit only reviews what's in the templates. Refresh the config from the WLC is the easiest way as you can select all of your WLC and perform this task.
Sent from Cisco Technical Support iPhone App

Cisco prime Infrastructure guest user schedule

Hi All,
What is the procedure to follow to create a Lobby Ambassador account in Cisco Prime, who can create a guest user and schedule the new password generation everyday for that guest account.
We want the Guest Account to be created once with one username (Ex: Guest 1) and everyday, a new password should be generated for Guest 1 and the credentials should be mailed to a network admin.
And how should I create lobby ambassador account in CPI? I know the prcedure for WLC.
Thanks,
CJ

You can find information on creating a Lobby Admin here:
http://www.cisco.com/c/en/us/td/docs/net_mgmt/prime/infrastructure/1-2/user/guide/prime_infra_ug/maint_user_access.html#wp1055438
HTH,
Steve
Please remember to rate useful posts, and mark questions as answered

Prime Infrastructure 2.2- problems: Wired Detailed Device Inventory report not running / Cisco 5500 WLCs no listed in subgroup

New installation of Prime Infrastructure 2.2.0 (PI-VA-2.2.0.0.158.ova)
installed fixes/software/device packs:
PI 2.2.1 Poodle Fix (installed)
PI 2.2.1 Maintenance Release (installed,ncs stopped,rebooted)
Prime Infrastrucutre 2.2 Device Pack 3 (installed,ncs stopped,rebooted)
Licences installed (ncs stopped,rebooted)
Added all devices via Bulk Import (Inventory>Device Management>Network Devices)
Problem 1:
The Cisco 5500 WLCs are not listed in Inventory>Device Management>Network Devices (see screen shot) but listed under "All Devices"!
The Cisco 4400 WLCs and the 8500 WLCs are listed within their subgroup.
Devices are in "Managed State"
Problem 2: fixed! (Browser issue)
Problem 3:
Unable to run "Wired Detailed Device Inventory" report because I get the error message: Failed to run report: Unable to retrieve data for: Chassis Information (if Chassis Information is selected, if System Information is selected I get the error message with ...retrieve data for:System Information)
All devices do have an "Admin Status = Managed" and the Last Inventory Collections Status = Completed.
Has anyone the same issues or a tip for me?
Another topic, the "User Defined Fileds" are not exported when with running a "Device Export" (Inventory > Device Management > Network Devices). ;-(
BR
Bastian

Hallo Bastian,
I think you still have browser issue, Using IE is still the best with Prime.
I have exactly same prime 2.2 and installed fixes/software/device packs.
I have no problem I can see all views. I use now IE 11, with Chrome 42.0.2311.90 and firefox 37.01 I have problems too with lots of views. You have not tell what browser + version you have.
Since you have same prime 2.2 as me. I have other problems, can you check yours?
Can you see a functional CLI template page at Configuration > Templates > Features & Technologies:
https://supportforums.cisco.com/discussion/12481691/can-cisco-prime-22-still-do-simple-ad-hoc-deployment-job-cli-over-all-switches
Do you have SNMP Connectivity Failed while Verify Credentials has no errors all green and checked.
https://supportforums.cisco.com/discussion/12494786/snmp-request-exceeds-internal-data-buffer-512-bytes-prime-22-asa-5545

Cisco Prime and WLC packet capture error - Request Timed Out

Hello,
We have a Cisco Prime installation (2.2.0) and a WLC (Cisco 5508)
I’ve been trying to test the wireless packet capture function, but have now run into problems, a quick rundown of my actions so far:
Selected a wireless access point in Prime and clicked ‘Packet Capture’
Did a packet capture saving to the PI, the capture worked fine
Could not find any way to delete the packet capture
Selected a wireless access point in Prime and clicked ‘Packet Capture’
Did a packet capture saving to an FTP server, the capture worked fine
The 1st capture had finished (10 minute capture) before testing the second
The 2nd capture has also finished and saved the files to the FTP server as specified
Now though I cannot capture from any access point as when I click ‘Packet Capture’ I get the error:
“Request Timed out. Error in getting data from server.”
The error is ‘instant’ as in no delay indicating something actually timing out.
So the 2 problems I have are:
How do I fix the ‘request timed out’ error above
How do I delete old packet captures from the PI
I hope someone can help as I can’t find any info on either of the problems.
Cheers
Adrian

I think I've solved (2) by deleting the files from the FTP directory on the prime box through SSH.
So I'm now just stuck on the timed out error.

Cannot add WLC 5508 7.2.111.3 to Cisco Prime Infrastructure 2.0

Though the Cisco Prime Infrastructure Compatibility Matrix list out that 7.2.111.3 is supported for PI 2.0
I am not able to add the controller to the PI 2.0.
The Reachability Status always shown "Unknow" and SNMP Status always shown "No response for SNMP Get".
There is no firewall between the WLC and PI.
And ping test shows it is reachable.
If I try to add controller by non-management port (I know it is not work but I want to try the reachability), the Reachability Status shown "Reachable" but the SNMP Status always shown error.
And if I use some SNMP testing software to test the SNMP port. SNMP can be quoted.
I have try to lower down the "Maximum VarBinds per Get PDU" but no luck.
Any thing I can do to troubleshoot the problem?

Yes, I follow the procedure but it does not work.
Another update:
I add another WLC with version 7.0.98.0. It is fine.
And I setup another new PI 2.0 and new temporary WLC5508 with 7.2.111.3 to test. It work fine also......
So, I am wondering the existing 7.2 WLC have problem in responsing the SNMP Get. But I dont have any idea to test....
Do anyone have idea to test the snmp connection between PI and WLC?

WLC 2504 in Cisco Prime Infrastructure 1.2

Trying to add Cisco 2504 Wireless Controller, Software Version 7.3.101.0, to Cisco Prime Infrastructure
1.2 (1.2.0.103), License Evaluation, with no success.
When using Discovery, Discovery Job show Credential Errors: "Error occured due to invalid SNMP credential"
When Add Device from Device Work Center I get:
Reachability is "Unknown", Device Type is empty, Collection Status is "Managed with Warnings", with message "SNMP Failure: No Response for SNMP Get request.", Collection Time is empty.
I've tried with both snmp v2 and v3.
I've tried to lower "Maximum VarBinds per Get PDU" to 10 or 20, cause I've read similar problem in NCS.

I solved the same problem 5min ago.!
select the device and press syc ..that helped me ...

Can we upgrade IOS in WLC 5508 through CISCO prime?

I have CISCO prime 2.0 and CISCO WLC 5508 HA SSO pair.
I would like to upgrade the software code for the WLC HA pair.
Can I do through the CISCO prime ......
As per the link :http://www.cisco.com/c/en/us/td/docs/wireless/controller/technotes/7-5/High_Availability_DG.html#pgfId-43571
1. After the WLCs are configured in the HA setup, the Standby WLC cannot be upgraded directly from the TFTP/FTP server.
Prime do the upgrade through FTP server , so will it be ok if we do the upgrade through it, for HA WLC.

Please check this link to upgrade wLC software in HA setup.
http://www.cisco.com/c/en/us/td/docs/wireless/controller/technotes/7-5/High_Availability_DG.html
Once the Primary WLC complete the upgrade , it will transfer the entire image to the Standby WLC via the Redundant Port.
Regards
Dont forget to rate helpful posts

Cisco Prime Infrastructure 1.3 - TFTP backup WLC not working

I don;t get the the background task "Controller Configuration Backup" working. I want to use default TFTP.
When i look in the logging i see 2 of three WLC's succesfully backuped there logging. Is their a log file where you can see what is happening?
With kind regards,
Martijn.

Hi Martijn:
If you go to the controller's GUI to Commands > Upload File and manually trigger the TFTP Configuration backup, does the process complete as expected? If not, whatever's causing that problem needs to be addressed first.
When someone wants to do a config backup from the command line, they give a series of commands
transfer download datatype config
transfer download mode tftp
transfer download serverip x.x.x.x
transfer download path ./
transfer download filename myBackup.cfg
transfer download start
The Controller Config Backup background task is just the SNMP version of "transfer download filename " and "transfer download start". If these other required settings aren't already there, the task isn't going to set them (the humans have to). If there's a problem with writing out the file on the server, or packet routing issues to get to the server, the task isn't going to see those things, it just knows that the answer to "transfer download start" wasn't "Okay!"
As for watching this processing in logs, go to Administration > Logging, and set the logging level to Trace for the modules SNMP and System, and click Save. Then kick off your backup attempt, allowing it to fail. When it does, return to Administration > Logging, and click the Download button to retrieve the logs.zip file. The activity should be in the ncs-x-x.log file.
If you don't have the new Update-1 patch for Prime Infrastructure 1.3.0.20 (filename PI_1.3.0.20_Update_1-12.tar.gz) installed, I'd suggest you get it. While it's not going to specifically address this issue, there are a lot of really good fixes in it.
Release Notes for Update 1 for Cisco Prime Infrastructure 1.3.0.20

Cisco prime guest user email

hello
when adding a guest in the cisco prime there is a option that you can print or email the user details.
is it possible to change the print page and the email that is send.
a need to add other picturen and change the template of the email and printing
thanks

Hello,
The logo on the page which would be printed with the guest user credentials can be customized. It can be done from:
Administration > Users, Roles & AAA > Users > Click on the User name for 'Lobby Ambassador' > Click on the 'lobby Ambassador Defaults' tabs & scroll down to see the 'update Logo' option.
The details of the emails/credentials format can't be customized.
Ram.

Limit Number of active sessions for wlan user in Cisco Prime

Is there a way to limit the number of logins from a particular set of credentials in Cisco Prime 2.1? I want to set a maximum of 2 logins from a particular user on the wlan. I have a guest wlan using layer 3 security and an internal wlan using RADIUS (Windows). Would appreciate the help

There is, but it isn't due to PI. It is a function of the WLC itself.
Under Security, there is a Concurrent User Login, set to 0(which is default) it is unlimited logins. This value can be changed to be the number of concurrent logins that work for your situation.
Be advised, this is not a Per WLAN setting, it is a controller wide setting.
HTH,
Steve

Cisco Prime NCS appliance & license

Hi all,
I'm looking for getting a Cisco prime NCS appliance (PRIME-NCS-APL-K9). I'm a little bit confused regarding to the license scheme:
1. Does the appliance has any license coming with it or we need to order the license separately?
2. If I have an WLC 5508 (license support 12 APs) & 12 3500 APs, then number of devices counted will be 1 (WLC) or 12 (APs) or 13 (WLC + APs) ?
Thanks for the help,

Cisco Prime Infrastructure for the first time you may access the lifecycle and assurance features using the built-in evaluation license that is available by default. The default evaluation license is valid for 60 days for 100 devices and 150 interfaces. You will need to purchase the base license and the corresponding feature license before the evaluation license expires. Cisco Prime Infrastructure 1.2 can be ordered using the standard Cisco® ordering tools at http://www.cisco.com/go/ordering. More information about getting the license files can be found in the Cisco Prime Infrastructure 1.2 Ordering and Licensing Guide

Ask The Expert: Understanding, Implementing, and Troubleshooting Cisco Prime Network

Ask questions and learn about Cisco Prime Network with Cisco experts Vignesh Rajendran Praveen and Jaminder Singh Bali.
Cisco Prime Network is and Cisco Prime Network provides cost-effective device operation, administration and network fault management for today’s complex and evolved programmable networks (EPNs). It is a single solution to support both the traditional physical network components, as well as compute infrastructure, and the virtual elements found in data centers. Automated configuration and change management combined with advanced troubleshooting and diagnostics greatly help service providers enable proactive service assurance. Additionally, the flexible and extensible architecture is designed to support the multivendor environment, helping to lower operational costs.
This event runs January 5 through January 16, 2015.
Vignesh Rajendran Praveen is a High Touch Engineer with the Focused Technical Services team supporting Cisco's major Service Provider customers in Routing, Switching, Multiprotocol Label Switching (MPLS) technologies and Cisco Prime Network related issues. Previously at Cisco he has worked as a Network Consulting Engineer for Enterprise Customers and as a Customer Support Engineer for Service Provider customers. He has been in the networking industry for ten years and holds CCIE certification (#34503) in the Routing and Switching as well as Service Provider tracks.
Jaminder Singh Bali is a Customer Support Engineer working in SP-NMS TAC team, supporting Cisco's major service provider customers in Cisco Prime Network, Performance and Prime Central related issues. His areas of expertise include Oracle, Linux and NMS applications. He has been in the industry for past six years.
Remember to use the rating system to let the experts know if you have received an adequate response.
The Experts might not be able to answer each question due to the volume expected during this event. Remember that you can continue the conversation in Network Infrastructure community, sub-community, LAN, Switching and Routing discussion forum shortly after the event. This event lasts through January 16, 2015. Visit this forum often to view responses to your questions and the questions of other community members.

Hello Jerome,
A variety of Cisco devices are supported by the the Cisco Prime Network. I would encourage you to go through the below links on the user guide depending the version of Cisco Prime Network being used.
"Cisco Prime Network Supported Cisco Virtual Network Elements (VNEs)"
"Cisco Prime Network Supported Cisco VNEs - Addendum"
Below is the link for the user guide.
http://www.cisco.com/c/en/us/support/cloud-systems-management/prime-network/products-user-guide-list.html
Hope this would help in providing you more clarity.
***********Plz do rate this post if you found it helpful*************************
Thanks & Regards,
Vignesh R P

Replicate in the Master controller and creation of new user with cisco prime infrastructure 2.1.

Hello!!
We have multiple controllers Cisco WLC 5508 (all running software version 7.6.120.0) distributed in various buildings and a controller in other control building (also Cisco WLC 7.6.120.0 5508) operating as Master and backup of the buildings's controllers .
Each building is radiated such an SSID that is used as a validation of the user connected to that SSID web portal each controller (in the WLAN, Security -> Layer 3 -> Web Policy), using the local database to validate the user.
The problem is that the local database of users is not being replicated between controllers buildings and the Master controller, so if you drop the controller of a building, the Master controller begins to provide service to the buildings access points, but the equivalent radiated SSID cannot able to validate users.
I need know if it's possible through Cisco Prime Infrastruture 2.1, first replicate in the Master controller on the basis of existing controllers buildings each local data and, second, that the creation of new users are automatically perform both the controllers like to the Master .
Thanks.

As noted earlier, it is not advisable to use the root user to log in for normal use. New users and groups can be created by navigating to Administration > Users, Roles & AAA as shown in the preceding figures. It would help to chalk out what are the various levels at which you want to distribute the users, and to create those roles first. It doesn’t really matter whether you create users or groups first. New users can be easily added by going to Administration > Users, Roles & AAA > Users > Add Users > Select “Add Users” from the drop-down on the right side. Once you get into the add user workflow, fill in the username, password, and local authorization for this user as shown in the figure below.
A virtual domain can also be assigned to the users when you define their roles by selecting the virtual domain on the left side and moving it to the right side as shown in the image below (left).

Cisco Prime WLC mismatch due to expired guest voucher

Similar Messages

Maybe you are looking for